Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I currently have a dedicated server with a domain name eg. domain.com which has its own dedicated IP address. I need to secure only one sub domain eg. secure.domain.com

Does this subdomain need its own dedicated IP address to get an SSL certificate? Also, am I correct in thinking that I only need a standard certificate not a wildcard?

share|improve this question

2 Answers 2

up vote 10 down vote accepted

If you only have one SSL subdomain, then you only need one IP address and you don't need a wildcard. You can run SSL for secure.domain.com on the same IP address as non-SSL for domain.com.

If you have more than one SSL domain, there are four ways to handle it:

  1. Multiple IP addresses
  2. Wildcard SSL certificate
  3. Server Name Indication
  4. Subject Alternative Name

They all have their own advantages and drawbacks, and you'd have to research them all to work out what's best for your application.

share|improve this answer

The certificate is associated with the name, not the IP address, so no, you don't need a dedicated IP address for your secure site.

If you only plan to have one secure site, a non-wildcard certificate should be sufficient.

share|improve this answer
    
This is not fully correct Dominic. According to this: martfox.com/customer/knowledgebase/140/… - in Apache an SSL cert is usually tied to an IP address because the SSL handshake happens before the browser has even specified which domain it is requesting. There may be some technical methods to get around this, however. –  Simon Sep 28 '12 at 1:08
    
If you only have one secure site, that won't be necessary. –  Dominic Cronin Oct 2 '12 at 14:08

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.